Add flag to enable extra attribute for JIT (#1066)

Signed-off-by: Shyr-Mei-Yang1 <[email protected]>

Author: YangShyrMei

internal/controller/operator/configmap.go

@@ -448,6 +448,7 @@ func generateAuthIdpConfigMap(clusterInfo *corev1.ConfigMap) ctrlcommon.Generate
 				"IDENTITY_MGMT_URL":                  "https://platform-identity-management:4500",
 				"MASTER_HOST":                        clusterInfo.Data["cluster_address"],
 				"NODE_ENV":                           "production",
+				"ENABLE_JIT_EXTRA_ATTR":              "false",
 				"AUDIT_ENABLED_IDPROVIDER":           "false",
 				"AUDIT_ENABLED_IDMGMT":               "false",
 				"AUDIT_DETAIL":                       "false",

internal/controller/operator/configmap_test.go

@@ -529,6 +529,7 @@ var _ = Describe("ConfigMap handling", func() {
 					"IDENTITY_MGMT_URL":                  "https://platform-identity-management:4500",
 					"MASTER_HOST":                        ibmcloudClusterInfo.Data["cluster_address"],
 					"NODE_ENV":                           "production",
+					"ENABLE_JIT_EXTRA_ATTR":              "false",
 					"AUDIT_ENABLED_IDPROVIDER":           "false",
 					"AUDIT_ENABLED_IDMGMT":               "false",
 					"AUDIT_DETAIL":                       "false",

internal/controller/operator/containers.go

@@ -784,6 +784,17 @@ func buildIdentityManagerContainer(instance *operatorv1alpha1.Authentication, id
 			Name:  "SERVICE_NAME",
 			Value: "platform-identity-management",
 		},
+		{
+			Name: "ENABLE_JIT_EXTRA_ATTR",
+			ValueFrom: &corev1.EnvVarSource{
+				ConfigMapKeyRef: &corev1.ConfigMapKeySelector{
+					LocalObjectReference: corev1.LocalObjectReference{
+						Name: "platform-auth-idp",
+					},
+					Key: "ENABLE_JIT_EXTRA_ATTR",
+				},
+			},
+		},
 		{
 			Name: "AUDIT_ENABLED",
 			ValueFrom: &corev1.EnvVarSource{